5+ years hands-on Azure infrastructure experience with enterprise customers (US/EMEA)
Proven track record delivering multi-region Azure deployments with DR/HA and Azure Landing Zone implementations
Security-focused architecture design and implementation (Zero Trust, NSG rules, Private Endpoints, Defender for Cloud, Entra ID/RBAC)
Infrastructure as Code expertise using Bicep and/or Terraform, modular patterns, scripting, and CI/CD pipelines
Requirements:
Design and implement enterprise Azure Landing Zone architectures, hub-spoke network topologies, multi-region HA, and disaster recovery following CAF and Zero Trust principles
Develop and enforce security architectures using NSG/Azure Firewall, Private Endpoints, Defender for Cloud, Front Door Premium with WAF, identity RBAC, and private DNS/VNet links
Lead hands-on IaC by building Bicep/Terraform modules, config-driven deployments, scripting, and CI/CD pipelines for infrastructure delivery
Lead customer engagement and end-to-end delivery from discovery through production deployment, including architecture reviews, security assessments, and delivery documentation
Job description
This is a remote position.
Location: Currently remote; may transition to onsite in the future
About the Role : We're looking for a hands-on Senior Azure Infrastructure Architect to lead enterprise cloud architecture and infrastructure delivery. You'll design and implement secure, production-grade Azure environments following Azure Landing Zone patterns, Zero Trust security principles, and Infrastructure as Code best practices.
This role requires deep expertise in Azure networking, security architecture, and IaC automation. You'll own end-to-end infrastructure delivery—from architecture design through Bicep/Terraform implementation—for global enterprise customers. We need someone who can whiteboard a hub-spoke topology and then build it hands-on.
Key Responsibilities:
Architecture & Design
Design enterprise Azure Landing Zone architectures following Microsoft Cloud Adoption Framework (CAF)
Architect Hub-Spoke network topologies with proper IP addressing, subnetting, and VNet peering strategies
Design Zero Trust security models with defense-in-depth layering
Create multi-region, high-availability architectures with geo-replication and disaster recovery
Conduct infrastructure assessments and develop optimization strategies
Design cost-efficient architectures balancing security, performance, and budget
Security Architecture
Implement NSG-only or Azure Firewall-based security models with deny-by-default rules
A hands-on architect who understands that architecture diagrams must translate to working infrastructure. You should be comfortable switching between whiteboard design sessions and terminal-based IaC deployments. We value:
Security-first mindset: Every design decision considers Zero Trust principles
IaC discipline: Infrastructure exists as code, not click-ops
Verification rigor: You validate deployments, not assume success
Documentation: Architecture decisions and operational knowledge are captured
Practical problem-solving: You find solutions within budget and timeline constraints
Continuous learning: Azure evolves rapidly; so should you
About Spektra Systems
Spektra Systems is a cloud solutions and infrastructure specialist delivering enterprise transformation across Microsoft Azure, AWS, and modern workplace technologies. We partner with global enterprises on their digital transformation journeys.
Why Join Spektra Systems?
Work on cutting-edge technologies with global enterprise customers
Opportunity to work with emerging technologies like AI, ML, and Agentic AI
Remote-first culture with flexibility and work-life balance
Continuous learning and certification support
Collaborative environment with focus on innovation
Career growth opportunities in a rapidly expanding organization
Competitive compensation with performance-based incentives
If you're ready to take your career to the next level and make a real impact on customers' digital transformation journeys, we'd love to hear from you!
